# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=750 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 751 --- ## [8.0 Upgrade Assistant and the changing log format warning](https://discuss.elastic.co/t/8-0-upgrade-assistant-and-the-changing-log-format-warning/292277)
**Author:** [@mw\_jko](https://discuss.elastic.co/u/mw_jko)\ **Replies:** 4\ **Last updated:** [December 17, 2021, 4:31pm UTC](https://discuss.elastic.co/t/8-0-upgrade-assistant-and-the-changing-log-format-warning/292277 "2021-12-17T16:31:46Z")
Heya, I updated the ELK stack to the very latest version and it looks like, it's the probably last "minor" update :tada: I fixed all the issues reported by the upgrade assistant so far (the upgrade assistant was a huge… --- ## [List of doc ids in an index](https://discuss.elastic.co/t/list-of-doc-ids-in-an-index/292279)
**Author:** [@sunny3794.ad](https://discuss.elastic.co/u/sunny3794.ad)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 4:10pm UTC](https://discuss.elastic.co/t/list-of-doc-ids-in-an-index/292279 "2021-12-17T16:10:43Z")
Is there any way of retrieving a list of all the document ids that are present in an index? Just the ids and not the actual data inside the documents. --- ## [Ask for best practice how to add new plugin analyzer to existing index (new field)](https://discuss.elastic.co/t/ask-for-best-practice-how-to-add-new-plugin-analyzer-to-existing-index-new-field/291589)
**Author:** [@garyzjq](https://discuss.elastic.co/u/garyzjq)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 4:09pm UTC](https://discuss.elastic.co/t/ask-for-best-practice-how-to-add-new-plugin-analyzer-to-existing-index-new-field/291589 "2021-12-17T16:09:46Z")
(ES 7.15) Hi teams, For custom analyzer (defined in Index setting as json format) , I saw there were 2 best practices: If want to add a new custom analyzer to existing index, need to close/re-open this index. If ther… --- ## [Upload images to elastic search and display it in kibana](https://discuss.elastic.co/t/upload-images-to-elastic-search-and-display-it-in-kibana/292258)
**Author:** [@Raghupathy\_M](https://discuss.elastic.co/u/Raghupathy_M)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 3:31pm UTC](https://discuss.elastic.co/t/upload-images-to-elastic-search-and-display-it-in-kibana/292258 "2021-12-17T15:31:48Z")
How to Upload images to Elasticsearch and display it in kibana --- ## [Logstash failing to build with custom java Plugin after log4j issue fix in 7.16.1 build](https://discuss.elastic.co/t/logstash-failing-to-build-with-custom-java-plugin-after-log4j-issue-fix-in-7-16-1-build/292316)
**Author:** [@Rahulkumar\_Pawar](https://discuss.elastic.co/u/Rahulkumar_Pawar)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 1:50pm UTC](https://discuss.elastic.co/t/logstash-failing-to-build-with-custom-java-plugin-after-log4j-issue-fix-in-7-16-1-build/292316 "2021-12-17T13:50:03Z")
I upgraded logstash source with 7.16.1 to have log4j vulnerability fix. Followed below steps Downloaded source code -- GitHub - elastic/logstash at v7.16.1 for source repo, ran ./gradlew assemble followed by rake … --- ## [FATAL error after updating to 7.16.1](https://discuss.elastic.co/t/fatal-error-after-updating-to-7-16-1/291959)
**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\ **Replies:** 14\ **Last updated:** [December 17, 2021, 2:11pm UTC](https://discuss.elastic.co/t/fatal-error-after-updating-to-7-16-1/291959 "2021-12-17T14:11:19Z")
\[FATAL\] 2021-12-15 11:35:53.567 \[main\] Logstash - Logstash was unable to start due to an unexpected Gemfile change. What is the Gemfile change? How do I debug this? Anyone else experienced this? I can't find anything… --- ## [Uptime Investigate Dropdown Link Uptime Monitor to Host Metrics/Logs](https://discuss.elastic.co/t/uptime-investigate-dropdown-link-uptime-monitor-to-host-metrics-logs/288419)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 6\ **Last updated:** [December 17, 2021, 1:57pm UTC](https://discuss.elastic.co/t/uptime-investigate-dropdown-link-uptime-monitor-to-host-metrics-logs/288419 "2021-12-17T13:57:08Z")
Hi All, In the Kibana UI \> Uptime \> Monitors, each monitor is listed. If you expand a monitor, there is a dropdown menu on the right hand side called Investigate, in the menu there are options like Show host logs and Sh… --- ## [Search documents with apostrophes in fields](https://discuss.elastic.co/t/search-documents-with-apostrophes-in-fields/292162)
**Author:** [@Gabriel\_DE\_RAMECOURT](https://discuss.elastic.co/u/Gabriel_DE_RAMECOURT)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 1:47pm UTC](https://discuss.elastic.co/t/search-documents-with-apostrophes-in-fields/292162 "2021-12-17T13:47:00Z")
Hello, I am quite new to Elascticsearch and try to write and search documents. I have no problem writing documents, but I have one when I try searching for documents using a word that is stored in a field with an apost… --- ## [Missing binaries - error 404 Elastic's Repo](https://discuss.elastic.co/t/missing-binaries-error-404-elastics-repo/292105)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 1:30pm UTC](https://discuss.elastic.co/t/missing-binaries-error-404-elastics-repo/292105 "2021-12-17T13:30:28Z")
Hi there, you announced version 7.16.1 of your stack, but I get error 404 since yesterday when I try to download the newest metricbet and journalbeat. Please check your repository. Thanks https://www.elastic.co/downl… --- ## [Missing logs due to kafka error](https://discuss.elastic.co/t/missing-logs-due-to-kafka-error/292307)
**Author:** [@1ac727ff300829bca0fa](https://discuss.elastic.co/u/1ac727ff300829bca0fa)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 12:36pm UTC](https://discuss.elastic.co/t/missing-logs-due-to-kafka-error/292307 "2021-12-17T12:36:54Z")
Hey guys, i have set up ELK with kafka where logs are sent to different kafka topics which then are sent to logstash indices. My problem is kafka went down for 2 days and i cannot see the logs for those two days in kiban… --- ## [How to create configure date filter data nested](https://discuss.elastic.co/t/how-to-create-configure-date-filter-data-nested/292273)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 11:27am UTC](https://discuss.elastic.co/t/how-to-create-configure-date-filter-data-nested/292273 "2021-12-17T11:27:19Z")
I have some nested data in my log in the form of unix time, and I am trying to convert it to a time stamp, this is an example of the data I want to convert into a time stamp, { "upstream\_uri": "\\/request", "route":… --- ## [Add Index Mapping to Indices](https://discuss.elastic.co/t/add-index-mapping-to-indices/292281)
**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 10:16am UTC](https://discuss.elastic.co/t/add-index-mapping-to-indices/292281 "2021-12-17T10:16:39Z")
I have updated my Index Template with a new mapping that is and Alias to an existing field. I now want to add that to all past indices. Do I use the mapping API to add it? Is there and example? Thanks in advance. --- ## [Long Query string from mysql.slowlog doesn't show on table but show on json](https://discuss.elastic.co/t/long-query-string-from-mysql-slowlog-doesnt-show-on-table-but-show-on-json/291887)
**Author:** [@budums](https://discuss.elastic.co/u/budums)\ **Replies:** 5\ **Last updated:** [December 17, 2021, 9:14am UTC](https://discuss.elastic.co/t/long-query-string-from-mysql-slowlog-doesnt-show-on-table-but-show-on-json/291887 "2021-12-17T09:14:38Z")
hi I already setup filebeat on database server to get slow log query and send to Elasticsearch. but on kibana at Discover menu if query string from slowlog is too long doesn't show on table view and I set expand fi… --- ## [Modificación formato campo number-duration](https://discuss.elastic.co/t/modificacion-formato-campo-number-duration/292280)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 9:09am UTC](https://discuss.elastic.co/t/modificacion-formato-campo-number-duration/292280 "2021-12-17T09:09:19Z")
Buenos días, ¿Se puede cambiar el formato del campo number de 0,0.\[000\] a 0.00,\[000\]? Tengo un campo en el índice tipo number con un formato DURATION (Default: number) la entrada en segundos y la salida en minutos. Has… --- ## [SIEM Event Correlation rule returns no data](https://discuss.elastic.co/t/siem-event-correlation-rule-returns-no-data/291197)
**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\ **Replies:** 3\ **Last updated:** [December 17, 2021, 9:06am UTC](https://discuss.elastic.co/t/siem-event-correlation-rule-returns-no-data/291197 "2021-12-17T09:06:06Z")
Kibana version 7.14.1 I am creating an Event Correlation rule in SIEM and the preview does not return any results. If I do the same query in Dev Tools it works. I see that the preview runs some kind of java script but … --- ## [Dec 17th, 2021: \[EN\] Getting Started with the Elasticsearch Python Client](https://discuss.elastic.co/t/dec-17th-2021-en-getting-started-with-the-elasticsearch-python-client/290535)
**Author:** [@Claire\_Burn](https://discuss.elastic.co/u/Claire_Burn)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-17th-2021-en-getting-started-with-the-elasticsearch-python-client/290535 "2021-12-17T08:00:52Z")
Getting Started With The Elasticsearch Python Client An Introduction To Elasticsearch With Python Elastic provides its own client for most languages, including of course - Python! There are two official Elasticsearch cli… --- ## [Logstash is not starting.. i have installed a new version of Logstash 7.16.1 , it crashes saying fatal error](https://discuss.elastic.co/t/logstash-is-not-starting-i-have-installed-a-new-version-of-logstash-7-16-1-it-crashes-saying-fatal-error/292026)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 6\ **Last updated:** [December 17, 2021, 5:05am UTC](https://discuss.elastic.co/t/logstash-is-not-starting-i-have-installed-a-new-version-of-logstash-7-16-1-it-crashes-saying-fatal-error/292026 "2021-12-17T05:05:27Z")
Logstash is not starting, I have installed Logstash 7.16.1, this is the error i am getting in logstash \[2021-12-15T17:28:43,113\]\[ERROR\]\[logstash.config.sourceloader\] No configuration found in the configured sources. \[2… --- ## [Need to bind logstash to eth0](https://discuss.elastic.co/t/need-to-bind-logstash-to-eth0/292236)
**Author:** [@Nie](https://discuss.elastic.co/u/Nie)\ **Replies:** 11\ **Last updated:** [December 17, 2021, 3:03am UTC](https://discuss.elastic.co/t/need-to-bind-logstash-to-eth0/292236 "2021-12-17T03:03:09Z")
I'm wondering why I am not seeing 5044 listener on the logstash server. I am seeing tcp port listeners on 9200 and 9600 when I execute "netstat -na". However, it's bound to loopback ip which is 127.0.0.1. Also, I can't… --- ## [Updating Logstash from an older version](https://discuss.elastic.co/t/updating-logstash-from-an-older-version/292245)
**Author:** [@b3owu1f](https://discuss.elastic.co/u/b3owu1f)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 2:43am UTC](https://discuss.elastic.co/t/updating-logstash-from-an-older-version/292245 "2021-12-17T02:43:44Z")
Greetings I have an unsupported operational Logstash I was required to update due to the Log4j2 vulnerability. The service was implemented long ago without documentation by crew already out of the company. Looking aroun… --- ## [Beats deployment error on ECK 1.2.0](https://discuss.elastic.co/t/beats-deployment-error-on-eck-1-2-0/242260)
**Author:** [@ssurenr](https://discuss.elastic.co/u/ssurenr)\ **Replies:** 5\ **Last updated:** [July 28, 2020, 10:18am UTC](https://discuss.elastic.co/t/beats-deployment-error-on-eck-1-2-0/242260 "2020-07-28T10:18:13Z")
I tried to deploy a simple metrics beat CRD with the following manifest (Taken from the samples). apiVersion: beat.k8s.elastic.co/v1beta1 kind: Beat metadata: name: heartbeat namespace: elastic-system spec: type: … --- ## [Cannot compute used swap when total swap is 0 and free swap is 0 : Elastic Search 6.8.21](https://discuss.elastic.co/t/cannot-compute-used-swap-when-total-swap-is-0-and-free-swap-is-0-elastic-search-6-8-21/292225)
**Author:** [@jthegoodlife](https://discuss.elastic.co/u/jthegoodlife)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 11:03pm UTC](https://discuss.elastic.co/t/cannot-compute-used-swap-when-total-swap-is-0-and-free-swap-is-0-elastic-search-6-8-21/292225 "2021-12-16T23:03:16Z")
Hi All, We have moved up into the version of Elasticsearch 6.8.21 We are getting logs of this continuously 2021-12-16T21:16:19,858\]\[WARN \]\[o.e.m.o.O.Swap \] \[BLAH\] cannot compute used swap when total swap is … --- ## [Logstash failing to ingest multi-line json log file... I think](https://discuss.elastic.co/t/logstash-failing-to-ingest-multi-line-json-log-file-i-think/291851)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 9:56pm UTC](https://discuss.elastic.co/t/logstash-failing-to-ingest-multi-line-json-log-file-i-think/291851 "2021-12-16T21:56:05Z")
I am having trouble getting my data ingested by logstash... I think... but I'm just learning about how to do this. Someone else stood up Cloud Custodian, and is dumping logs to an s3 bucket, and I am attempting to inge… --- ## [Sending data to TCP socket server on connect using logstash](https://discuss.elastic.co/t/sending-data-to-tcp-socket-server-on-connect-using-logstash/292221)
**Author:** [@Bobby\_Maine](https://discuss.elastic.co/u/Bobby_Maine)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 8:40pm UTC](https://discuss.elastic.co/t/sending-data-to-tcp-socket-server-on-connect-using-logstash/292221 "2021-12-16T20:40:05Z")
Hi - I have a question that are two parts I am trying to configure logstash as a tcp socket client and have to send a message to the socket server each time the the socket client connects All messages sent and rece… --- ## [Problem witch characters "㈰㈱ⴱ㈭ㄶㄶ㄰" in field Message](https://discuss.elastic.co/t/problem-witch-characters-a-a-a-a-a-a-a-in-field-message/292214)
**Author:** [@Adixon\_Diaz](https://discuss.elastic.co/u/Adixon_Diaz)\ **Replies:** 2\ **Last updated:** [December 16, 2021, 8:17pm UTC](https://discuss.elastic.co/t/problem-witch-characters-a-a-a-a-a-a-a-in-field-message/292214 "2021-12-16T20:17:45Z")
Hi Elastic team, I have problem with some insertion in my logstash. I recieve a lot of row by second and some event give me "\_dateparsefailure" i could see in debug mode that this issue es when the field message come th… --- ## ["GET \_cat/indices" does not output all the indices](https://discuss.elastic.co/t/get-cat-indices-does-not-output-all-the-indices/292096)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 2\ **Last updated:** [December 16, 2021, 7:24pm UTC](https://discuss.elastic.co/t/get-cat-indices-does-not-output-all-the-indices/292096 "2021-12-16T19:24:18Z")
Hi Elastic, kibana 7.15.1 This gives me 31 rows (30 indices in total and first row for heading) GET \_cat/indices/\*?v&s=index:desc health status index uuid pri rep docs.coun… --- ## [Only title/first row get inserted in in elasticsearch](https://discuss.elastic.co/t/only-title-first-row-get-inserted-in-in-elasticsearch/292119)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 4\ **Last updated:** [December 16, 2021, 6:10pm UTC](https://discuss.elastic.co/t/only-title-first-row-get-inserted-in-in-elasticsearch/292119 "2021-12-16T18:10:26Z")
Hello team, I am sending data to Elasticsearch , I have .log files which containes below data. But Only title/first row get inserted in in Elasticsearch Sample log: Server Started Timestamp SeverityID EventID Severity… --- ## [Extract domain with grok](https://discuss.elastic.co/t/extract-domain-with-grok/292172)
**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 5:31pm UTC](https://discuss.elastic.co/t/extract-domain-with-grok/292172 "2021-12-16T17:31:17Z")
Hello! I have the following logs, with field "destination" looks like one of those: s03.amazon.com a63.google.com ayndex.cc s23.a4.test.com test.google.co.uk Is it possible by Grok filter in Logstash, or maybe other w… --- ## [Optional text + field RegEx with filters in Logstash](https://discuss.elastic.co/t/optional-text-field-regex-with-filters-in-logstash/292151)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 2\ **Last updated:** [December 16, 2021, 5:17pm UTC](https://discuss.elastic.co/t/optional-text-field-regex-with-filters-in-logstash/292151 "2021-12-16T17:17:54Z")
Hello! how can i set a text I use as locator as optioanal with regular expresions or grok ?? For example : 2021-12-15 13:50:34,589 INFO Parámetros enviados a XXXXXX: accion : YYYYYYYYYYY mesNacimiento : YYYYYYYYYY… --- ## [Problem java while upgrading elasticsearch 7.9.3 to 7.16](https://discuss.elastic.co/t/problem-java-while-upgrading-elasticsearch-7-9-3-to-7-16/292197)
**Author:** [@sdesseaux](https://discuss.elastic.co/u/sdesseaux)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 5:13pm UTC](https://discuss.elastic.co/t/problem-java-while-upgrading-elasticsearch-7-9-3-to-7-16/292197 "2021-12-16T17:13:28Z")
Hello, I've problem while upgrading elasticsearch 7.9.3 to 7.16. I've this message " could not find java in bundled JDK at /usr/share/elasticsearch/jdk/bin/java" But things seems to be OK java -version openjdk ve… --- ## [Kibana 7.16.1 plugin installation](https://discuss.elastic.co/t/kibana-7-16-1-plugin-installation/292047)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [December 16, 2021, 4:40pm UTC](https://discuss.elastic.co/t/kibana-7-16-1-plugin-installation/292047 "2021-12-16T16:40:47Z")
Hello there, I am updating my Elasticstack from 7.13.3 to 7.16.1 due to apache Log4j2 vulnerability. Now I have a custom plugin which is compatible with 7.13.3. I assume it should be compatible with 7.16.1. can I just… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=749) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=751)